Creating ipBlock of type ipv4 or ipv6 does not work because it tries to create an ipse

I think this issue should be fixed by fixing <a class="issue-link js-issue-link" data-

Still same error: <div class="snippet-clipboard-content notranslate position-relat

This is what I tried: <a href="https://github.com/manuelbuil/PoCs/blob/main/2021/i

network policy type: ipBlock not working about kube-router HOT 5 CLOSED

k3s-io commented on June 2, 2024

network policy type: ipBlock not working

from kube-router.

Comments (5)

vadorovsky commented on June 2, 2024

I think this issue should be fixed by fixing #5

That's because this error was returned here:

https://github.com/k3s-io/kube-router/blob/dual-stack-v1.3.2/pkg/controllers/netpol/policy.go#L145

And before that, we were generating the ipset entries based on currentPodIPs, here:

https://github.com/k3s-io/kube-router/blob/dual-stack-v1.3.2/pkg/controllers/netpol/policy.go#L119-L122

So I believe that the problem was that currentPodIPs[v1core.IPv6Protocol] contained incorrect IPv4 addresses, due to bug #5.

from kube-router.

vadorovsky commented on June 2, 2024

But I will keep this issue open just in case

from kube-router.

manuelbuil commented on June 2, 2024

Still same error:

Mar 15 17:36:17 ip-10-0-10-40 k3s[678123]: E0315 17:36:17.837424  678123 network_policy_controller.go:253] Aborting sync. Failed to sync network policy chains: failed to perform ipset restore: ipset v7.6: Error in line 10: Syntax error: cannot parse 10.42.0.8: resolving to IPv6 address failed

from kube-router.

manuelbuil commented on June 2, 2024

This is what I tried:
https://github.com/manuelbuil/PoCs/blob/main/2021/ipv6-poc/httpd-ipv6.yaml

And the network policy:
https://github.com/manuelbuil/PoCs/blob/main/2021/network_policy_podSelector-httpd-ipBlock.yml

from kube-router.

vadorovsky commented on June 2, 2024

It's fixed now

from kube-router.

Recommend Projects